Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/n49fMCMST9Bm31YASm6g6KPBnJc.roa
File: n49fMCMST9Bm31YASm6g6KPBnJc.roa (raw, json)
Hash identifier: 0Gm4o4e3V627eEQe/zj0MKSMOVDj55OU7+oE4F5SwjY=
Subject key identifier: 9F:8F:5F:30:23:12:4F:D0:66:DF:56:00:4A:6E:A0:E8:A3:C1:9C:97
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 01857169C199B2006B7FE4F64677532845C5
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/n49fMCMST9Bm31YASm6g6KPBnJc.roa
Signing time: Mon 02 Jan 2023 07:37:14 +0000
ROA not before: Mon 02 Jan 2023 07:37:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201703
IP address blocks: 185.206.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:c1:99:b2:00:6b:7f:e4:f6:46:77:53:28:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Jan 2 07:37:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f8f5f3023124fd066df56004a6ea0e8a3c19c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b5:98:e6:07:9c:9d:ec:d8:f1:5a:93:82:98:
11:4f:e7:7f:c6:fa:56:a8:d9:0f:da:dd:0f:30:a9:
fa:a1:33:f4:d0:1b:05:96:6a:8c:07:ef:61:58:d3:
99:30:83:42:30:b2:92:f2:fe:f4:f7:30:ba:83:65:
4b:5c:40:3b:21:7c:52:35:9d:fb:79:07:1b:0a:e9:
53:2f:2d:0c:07:76:70:38:70:63:8f:e0:bb:eb:da:
d6:1d:75:e1:92:8b:2e:8d:3a:10:f3:06:70:c0:8d:
fa:76:9c:20:98:49:2d:6d:88:b3:a6:c7:12:f8:97:
e9:8b:f6:af:4b:0b:b5:85:27:65:b8:29:24:7f:5b:
2b:f4:10:4e:8b:59:26:21:11:48:4d:73:6f:1b:d1:
63:40:a1:75:b8:c3:86:3c:9f:4b:e6:3f:a8:90:57:
51:81:68:42:3b:21:55:f0:74:09:43:66:2e:9f:ac:
94:94:e2:4b:37:93:57:f7:93:71:1d:e7:91:88:1b:
53:e3:3f:e7:24:30:d9:78:a8:ab:cb:2c:aa:d2:98:
61:53:98:cb:7b:34:d0:37:45:ec:9c:e2:18:87:8b:
3e:fc:a7:55:7d:07:6d:ea:1f:1c:a9:0b:bc:9e:74:
07:08:e1:18:43:89:c0:67:fd:74:e2:5c:7a:fb:60:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:5F:30:23:12:4F:D0:66:DF:56:00:4A:6E:A0:E8:A3:C1:9C:97
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/n49fMCMST9Bm31YASm6g6KPBnJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
78:21:b7:4d:45:ce:b7:f1:a5:ac:75:7c:e5:b3:ae:90:f5:b5:
2e:ce:c0:11:d3:f5:5b:be:19:f3:db:a6:58:d7:aa:4d:35:db:
a8:bc:c7:39:b2:ce:7f:f9:92:f5:b5:b8:e5:e3:91:58:02:0d:
b3:de:a8:71:50:a2:64:d5:ac:4e:e0:31:b2:6a:27:7b:d2:d2:
55:49:b3:66:a7:12:a9:07:c0:02:73:b4:db:fb:cf:24:28:ba:
b2:54:7f:bb:c1:33:01:15:87:8f:e9:9c:15:24:eb:e2:98:b9:
5c:12:a3:74:55:a8:31:7c:44:cd:f9:37:0f:2c:6b:94:f3:3e:
18:21:36:1e:59:87:12:c7:ce:fd:88:3a:14:d2:fd:3f:5f:74:
7d:72:8e:2d:7d:62:6b:74:60:b3:f9:f0:b6:79:72:1e:31:cb:
f6:66:5c:05:71:f2:1b:47:27:37:74:99:42:c7:22:fe:a6:5f:
db:52:5c:94:4b:e8:f5:6d:a4:4b:4f:94:94:5c:2e:0c:a1:15:
ec:fd:98:93:9c:c3:f4:fa:9e:90:11:b1:18:28:4d:34:67:8e:
91:17:c5:86:c3:11:71:fe:94:1e:cf:07:11:4b:9f:c3:39:71:
3d:e4:d2:bb:91:04:46:aa:cb:d5:02:eb:a2:f5:30:4c:82:25:
a5:4a:da:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org